perldelta up to 5ee2604e72cdd836101f279f8f9e89243c7f0097

1 files changed, 13 insertions, 2 deletions

diff --git a/pod/perl5125delta.pod b/pod/perl5125delta.pod
index 380679d7bf..30661cedbb 100644
--- a/pod/perl5125delta.pod
+++ b/pod/perl5125delta.pod
@@ -31,6 +31,16 @@ execution attacks.  There are no known exploits in the wild.  The problem has be
 corrected by explicitly disabling all unsupported flags and setting unused function
 pointers to null.  Bug reported by Clément Lecigne.
 
+=head2 Heap buffer overrun in 'x' string repeat operator (CVE-2012-5195)
+
+Poorly written perl code that allows an attacker to specify the count to
+perl's 'x' string repeat operator can already cause a memory exhaustion
+denial-of-service attack. A flaw in versions of perl before 5.15.5 can
+escalate that into a heap buffer overrun; coupled with versions of glibc
+before 2.16, it possibly allows the execution of arbitrary code.
+
+This problem has been fixed.
+
 =head1 Incompatible Changes
 
 XXX For a release on a stable branch, this section aspires to be:
@@ -76,7 +86,8 @@ L<B::Concise> no longer produces mangled output with the B<-tree> option
 =head3 L<charnames>
 
 A regression introduced in Perl 5.8.8 has been fixed, that caused
-C<charnames::viacode(0)> to return C<undef> instead of the string "NULL".
+C<charnames::viacode(0)> to return C<undef> instead of the string "NULL"
+[perl #72624].
 
 =head3 L<File::Glob> has been upgraded from version 1.07 to version 1.07_01.
 
@@ -169,7 +180,7 @@ XXX
 =item Mac OS X
 
 There have been configuration and test fixes to make Perl build cleanly on
-Lion.
+Lion and Mountain Lion.
 
 =back